Privacy policy

1. Who processes your data

The controller of your personal data is Udruga za poboljšanje kvalitete života i prehrambenih izbora 3H život, Andrije Hebranga 97, 31000 Osijek, Croatia, OIB 20314861449, MB 5684609.

For any questions about your data and to exercise your rights, write to info@anitafreimann.com.

2. What data we collect

• Contact form: your name, email address, the topic and the message you write.
• Signing up for Anita's letters or the free book preview: your name, email address and a record of your consent (the time and type of sign-up).
• Registering for the Permission to Live programme: your name, email address and payment details (amount, date, payment method). You enter your card details directly with the payment provider Stripe. We do not see or store them.
• Server logs (IP address, time of access, page requested, browser type), which the server records automatically for security purposes and to keep the website working properly.
• The country you are visiting from, only to show you the website in the right language: visitors from outside Croatia and neighbouring countries (Bosnia and Herzegovina, Serbia, Montenegro, Slovenia, North Macedonia) are taken to the English version, unless their browser is set to Croatian or a related language. We determine the country from your IP address on our own server, using the DB-IP database (IP Geolocation by DB-IP, db-ip.com, CC BY 4.0 licence). Your IP address is not sent to anyone and is not stored for this purpose.

3. Why we process data and on what legal basis

• Replying to your message sent through the contact form: your enquiry, that is, steps taken prior to entering into a contract, and our legitimate interest in replying to you (Article 6(1)(b) and (f) of the General Data Protection Regulation, GDPR).
• Sending Anita's letters and the free book preview: your consent (Article 6(1)(a) GDPR). You can withdraw your consent using the unsubscribe link at the bottom of every message.
• Taking part in the programme, access to the platform and billing: performance of a contract (Article 6(1)(b) GDPR) and our legal obligation to keep accounting records (Article 6(1)(c) GDPR).
• Website security and protecting the forms against misuse: legitimate interest (Article 6(1)(f) GDPR).

4. Who we share data with

We do not sell your data or give it to anyone for their own purposes. We only use service providers who process it on our behalf and on our instructions:

• UAB MailerLite (Lithuania, EU): sending Anita's letters, the free book preview and notifications.
• Email service provider: delivering messages sent through the contact form.
• Server (VPS) hosting provider, EU: hosting the website and the forms.
• Stripe Payments Europe, Ltd. (Ireland, EU): payment processing. Stripe also processes payment data under its own privacy policy.
• Teachable, Inc. (USA): the platform hosting the Permission to Live programme materials.
• Zoom Video Communications, Inc. (USA): live sessions. Other participants can see your name if you display it in Zoom.
• The programme's Viber community: you join the group yourself, via a link. Viber (Viber Media S.à r.l., Luxembourg) processes data under its own privacy policy.
• Google Ireland Limited (YouTube): a video on the website only loads when you play it, via youtube-nocookie.com.
• Google Ireland Limited (Google Analytics), only with your consent to cookies: measuring visits to the website.
• Meta Platforms Ireland Limited (Meta Pixel), only with your consent to cookies: measuring the performance of ads on Facebook and Instagram.

5. Transfers outside the European Union

Teachable and Zoom are based in the USA, and Google and Meta may transfer data to their parent companies in the USA. Such transfers take place on the basis of a European Commission adequacy decision (the EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

6. How long we keep data

• Sign-ups for the letters and the book: until you unsubscribe or request erasure.
• Messages sent through the contact form: for as long as the conversation about your enquiry continues, and no longer than 24 months.
• Purchase and payment data: for as long as accounting regulations require.
• Server logs: no longer than 14 days.

7. Your rights

You have the right at any time to:

• know what data we hold about you and receive a copy of it (right of access),
• have inaccurate data rectified,
• request erasure of your data (the “right to be forgotten”),
• restrict processing or object to it,
• receive your data in a machine-readable format (data portability),
• withdraw your consent, without consequences and without giving reasons. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8. Right to lodge a complaint

If you believe that we process your data in breach of the law, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

9. Cookies

We only use cookies for measuring visits (Google Analytics) and for advertising (Meta Pixel) if you agree by selecting “Accept”. Without your consent, only essential storage is used. Details are on the Cookies page, and you can change your decision using the “Cookie settings” link in the footer.